CVE-2020-37195
Published: 11 February 2026
Summary
CVE-2020-37195 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Nsauditor (inferred from references). Its CVSS base score is 4.6 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 13.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-11 (Error Handling).
Deeper analysis
CVE-2020-37195 is a denial of service vulnerability in BlueAuditor 1.7.2.0, specifically affecting the registration name input field. The flaw, classified under CWE-120 (buffer overflow), allows attackers to crash the application by generating and pasting a 1000-character buffer payload into the 'Name' field. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its impact on availability.
Attackers require no privileges and can exploit this remotely over the network with low attack complexity and no user interaction, per the CVSS vector. Successful exploitation crashes the BlueAuditor application, resulting in a denial of service that disrupts its functionality without affecting confidentiality or integrity.
References include the vendor site at http://www.nsauditor.com/, a proof-of-concept exploit at https://www.exploit-db.com/exploits/47857, and an advisory from VulnCheck at https://www.vulncheck.com/advisories/blueauditor-name-denial-of-service. No patch or mitigation details are specified in the provided information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-31139
Vulnerability details
BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in local app input field directly enables application crash via exploitation, mapping to T1499.004 (Application or System Exploitation) for DoS impact.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly validates inputs to the registration name field, preventing buffer overflows from oversized payloads like the 1000-character string.
Restricts the quantity and types of information input into fields like the registration name, blocking excessive payloads that trigger the buffer overflow DoS.
Ensures error handling in the application prevents crashes from invalid inputs, mitigating the DoS effect of the buffer overflow vulnerability.